$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft File: 946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft (raw, json) Hash identifier: hdWoPdrQKlkPAwvugF2T3sopi+Q6dWvCtdMFlmU80ac= Subject key identifier: CB:97:1E:E7:5E:CC:9A:B8:C5:87:06:25:DD:54:5E:13:72:82:33:9C Authority key identifier: 94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C Certificate issuer: /CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C Certificate serial: 2B332D5B8DBCB712048C1C153E2298D245EAC613 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft Manifest number: E3 Signing time: Tue 04 Nov 2025 06:03:32 +0000 Manifest this update: Tue 04 Nov 2025 05:58:32 +0000 Manifest next update: Wed 05 Nov 2025 07:56:32 +0000 Files and hashes: 1: 946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl (hash: No7PlztlkMtouoJ7WlDHpEq7CvDb4rs8hGSi5aDNmIw=) 2: 326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa (hash: MnToG5/hHH9Scp/i63sn6+7U3FU6WhprF2dCg9QmzZ4=) 3: 326131343a373538343a333030323a3a2f34382d3438203d3e203530313034.roa (hash: Crxg8Afd9H4uvcM/AEMgGkuEVpajXoOdPvRiA2PLFc4=) 4: 326131343a373538343a333030313a3a2f34382d3438203d3e20313532333638.roa (hash: RycjpThYIZhrgAMUdYbKLisjcTcczyRyV0B6ob/yXcs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 07:56:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:33:2d:5b:8d:bc:b7:12:04:8c:1c:15:3e:22:98:d2:45:ea:c6:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C Validity Not Before: Nov 4 05:58:32 2025 GMT Not After : Nov 5 07:56:32 2025 GMT Subject: CN=CB971EE75ECC9AB8C5870625DD545E137282339C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ff:71:4e:ee:43:82:90:82:e9:98:ae:00:af: 2f:e2:72:16:51:45:b7:fb:c8:73:6d:5e:41:48:7c: 70:c0:30:85:b5:0c:dc:46:c6:d2:87:ce:4d:c1:2e: 7e:f8:8a:f9:4f:6e:3b:79:70:c0:02:bb:56:2c:78: 44:ba:46:b4:7a:de:6c:fe:08:8d:7b:de:99:d0:2a: 70:02:8b:4c:2a:f1:cf:fd:a4:ee:ce:68:ef:e8:ae: 8b:e2:86:fa:d9:b2:74:4c:ba:99:a4:c9:03:db:9d: d5:89:8e:82:7a:75:76:06:55:98:ed:49:d1:8f:bf: 6f:1c:a4:a7:d2:5a:07:cd:43:cc:e5:25:fd:0a:70: 29:7b:0f:61:18:a7:06:85:d4:82:54:ab:09:d7:81: 82:82:21:ba:94:47:26:80:5a:67:ae:3a:10:36:32: 9b:44:bc:18:9d:5a:f3:23:0e:ac:23:e3:59:08:74: eb:b3:72:f5:0f:8e:9c:b0:d6:9f:db:19:61:61:ea: fc:f9:50:3c:2a:e8:53:3d:7a:66:32:19:9f:5d:9b: fa:c6:a9:38:56:b7:8c:48:5a:d2:38:c2:94:58:f5: 78:25:89:a0:c3:1c:93:61:6b:44:21:e3:ce:0f:01: ff:2b:3c:7b:1a:63:1a:cc:0b:69:a6:11:98:0e:07: 8e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:97:1E:E7:5E:CC:9A:B8:C5:87:06:25:DD:54:5E:13:72:82:33:9C X509v3 Authority Key Identifier: keyid:94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:8f:1d:10:0f:f3:ae:57:54:37:73:7e:e9:10:cd:c5:a4:35: d5:74:d5:12:13:b1:ad:72:ea:f3:dc:1d:40:0e:58:96:ae:9e: 4d:10:49:25:7d:96:c2:52:db:ac:5c:61:00:87:d3:8d:08:80: 36:a8:4d:bd:d7:77:e4:79:b7:d7:47:1f:6d:04:15:b7:e4:13: 9a:e7:83:75:7d:c6:94:86:6d:f8:73:74:3d:bd:cb:55:3d:6e: 14:6e:a5:02:6a:74:18:b4:6b:fe:19:9e:f7:45:eb:2c:ae:f3: fd:8b:98:d9:1f:ce:74:22:76:a0:ce:5a:e4:19:06:f2:65:14: 5a:e2:7a:e9:d6:ed:7a:27:77:31:aa:98:a8:f6:22:51:4e:81: 93:99:20:06:b4:7a:59:a7:09:a9:2c:ba:33:62:2f:fa:9a:b5: 5c:a9:3d:c9:ee:1f:2c:6b:3d:46:da:87:62:84:c8:b7:d3:e0: e3:d5:e6:03:65:bb:ec:eb:52:fb:de:eb:1a:40:b0:ca:d3:ad: 1e:a1:86:5d:46:0a:3e:b3:5c:8b:41:36:56:d1:c1:df:4c:8a: fa:b0:28:64:b7:ea:39:08:97:2f:5f:32:09:c7:fb:20:06:8b: 5d:03:f0:55:64:78:36:94:e1:73:aa:80:1d:3a:c7:93:f6:74: 06:8f:6d:5d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUKzMtW428txIEjBwVPiKY0kXqxhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ2REUxNUQzNEJFQUUyNEUyOUVBMTZBM0ZFMUU2NTkx QjI3QUQ5QzAeFw0yNTExMDQwNTU4MzJaFw0yNTExMDUwNzU2MzJaMDMxMTAvBgNV BAMTKENCOTcxRUU3NUVDQzlBQjhDNTg3MDYyNURENTQ1RTEzNzI4MjMzOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO/3FO7kOCkILpmK4Ary/ichZR Rbf7yHNtXkFIfHDAMIW1DNxGxtKHzk3BLn74ivlPbjt5cMACu1YseES6RrR63mz+ CI173pnQKnACi0wq8c/9pO7OaO/orovihvrZsnRMupmkyQPbndWJjoJ6dXYGVZjt SdGPv28cpKfSWgfNQ8zlJf0KcCl7D2EYpwaF1IJUqwnXgYKCIbqURyaAWmeuOhA2 MptEvBidWvMjDqwj41kIdOuzcvUPjpyw1p/bGWFh6vz5UDwq6FM9emYyGZ9dm/rG qThWt4xIWtI4wpRY9XgliaDDHJNha0Qh484PAf8rPHsaYxrMC2mmEZgOB46jAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUy5ce517MmrjFhwYl3VReE3KCM5wwHwYDVR0j BBgwFoAUlG3hXTS+riTinqFqP+HmWRsnrZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzcvOTQ2REUxNUQzNEJFQUUyNEUyOUVBMTZBM0ZFMUU2NTkxQjI3QUQ5Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85NDZERTE1RDM0QkVBRTI0RTI5RUExNkEz RkUxRTY1OTFCMjdBRDlDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzFiZDMwNmI0LWU1YzMtNDhmOS1iMmVlLTM2YTliZGRlZDhjNC83Lzk0NkRFMTVE MzRCRUFFMjRFMjlFQTE2QTNGRTFFNjU5MUIyN0FEOUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCljx0Q D/OuV1Q3c37pEM3FpDXVdNUSE7Gtcurz3B1ADliWrp5NEEklfZbCUtusXGEAh9ON CIA2qE2913fkebfXRx9tBBW35BOa54N1fcaUhm34c3Q9vctVPW4UbqUCanQYtGv+ GZ73RessrvP9i5jZH850InagzlrkGQbyZRRa4nrp1u16J3cxqpio9iJRToGTmSAG tHpZpwmpLLozYi/6mrVcqT3J7h8saz1G2odihMi30+Dj1eYDZbvs61L73usaQLDK 060eoYZdRgo+s1yLQTZW0cHfTIr6sChkt+o5CJcvXzIJx/sgBotdA/BVZHg2lOFz qoAdOseT9nQGj21d -----END CERTIFICATE-----Generated at Tue Nov 4 18:16:39 2025 by rpki-client